KubeVirt vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20231
3. 20257

Newest CVEs

• CVE-2025-64324

  KubeVirt Vulnerable to Arbitrary Host File Read and Write

  kubevirt · kubevirt

  High8.5
• CVE-2025-64433

  KubeVirt Arbitrary Container File Read

  kubevirt · kubevirt

  Medium6.5
• CVE-2025-64437

  KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes

  kubevirt · kubevirt

  Medium5.0
• CVE-2025-64436

  KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes

  kubevirt · kubevirt

  Medium6.9
• CVE-2025-64435

  KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation

  kubevirt · kubevirt

  Medium5.3
• CVE-2025-64434

  KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing

  kubevirt · kubevirt

  Medium4.7
• CVE-2025-64432

  KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer

  kubevirt · kubevirt

  Medium4.7
• CVE-2023-26484

  On a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs

  kubevirt · kubevirt

  High8.2
• CVE-2019-10175

  A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning feature does not determine whether the…

  KubeVirt · containerized-data-importer

  Medium6.5